bugtraq mailing list - 2014/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2014/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 13	²	³ 16	⁴	⁵
⁶ 4	⁷ 6	⁸ 4	⁹ 16	¹⁰	¹¹	¹²
¹³ 8	¹⁴ 9	¹⁵ 11	¹⁶ 10	¹⁷ 9	¹⁸	¹⁹
²⁰ 19	²¹ 13	²² 6	²³	²⁴ 20	²⁵	²⁶
²⁷ 8	²⁸ 14	²⁹ 8	³⁰ 4	³¹ 6

Messages by day:

October 1 (13 messages)

PayPal Inc Bug Bounty #59 - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #71 PPM - Persistent Filter Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
All In One Wordpress Firewall 3.8.3 - Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBST02958 rev.1 - HP MPIO Device Specific Module Manager, Local Execution of Arbitrary Code with Privilege Elevation (security-alert@...com)
[security bulletin] HPSBMU03112 rev.1 - HP System Management Homepage (SMH) on Linux and Windows, Multiple Vulnerabilities (security-alert@...com)
[security bulletin] HPSBGN03117 rev.1 - HP Remote Device Access: Virtual Customer Access System (vCAS) running Bash Shell, Remote Code Exe… (security-alert@...com)
[SECURITY] [DSA 3040-1] rsyslog security update (Luciano Bello <luciano@...ian.org>)
[security bulletin] HPSBHF03119 rev.1 - HP DreamColor Display running Bash Shell, Remote Code Execution (security-alert@...com)
NEW VMSA-2014-0010 - VMware product updates address critical Bash security vulnerabilities (VMware Security Response Center <security@...are.com>)
FreePBX (All Versions) RCE (rob.thomas@...moozecom.com)
Cross-Site Scripting (XSS) in Photo Gallery WordPress plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
Reflected Cross-Site Scripting (XSS) in Textpattern (High-Tech Bridge Security Research <advisory@...ridge.com>)
[SECURITY] [DSA 3041-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 3 (16 messages)

[ MDVSA-2014:192 ] perl-Email-Address (security@...driva.com)
[ MDVSA-2014:193 ] xerces-j2 (security@...driva.com)
the other bash RCEs (CVE-2014-6277 and CVE-2014-6278) (Michal Zalewski <lcamtuf@...edump.cx>)
[security bulletin] HPSBHF03119 rev.2 - HP DreamColor Professional Display running Bash Shell, Remote Code Execution (security-alert@...com)
Ultra Electronics / AEP Networks - SSL VPN (Netilla / Series A / Ultra Protect) Vulnerabilities (Patrick Webster <patrick@...security.com.au>)
Elasticsearch vulnerability CVE-2014-6439 (Jordan Sissel <jordan.sissel@...sticsearch.com>)
[security bulletin] HPSBMU03118 rev.1 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities (security-alert@...com)
[security bulletin] HPSBMU02895 SSRT101253 rev.3 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of … (security-alert@...com)
[ MDVSA-2014:194 ] phpmyadmin (security@...driva.com)
[ MDVSA-2014:195 ] libvirt (security@...driva.com)
CVE-2014-7277 Stored Server XSS in ZyXEL SBG-3300 Security Gateway (mirko.casadei@...il.com)
CVE-2014-7278 DoS in ZyXEL SBG-3300 Security Gateway (mirko.casadei@...il.com)
BulletProof Security Wordpress v50.8 - POST Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
HTTP Commander AJS v3.1.9 - Client Side Exception Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty Issue #70 France - Persistent (Escape Shopping) Mail Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBHF03124 rev.1 - HP Thin Clients running Bash, Remote Execution of Code (security-alert@...com)

October 6 (4 messages)

[SECURITY] [DSA 3042-1] exuberant-ctags security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3044-1] qemu-kvm security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3045-1] qemu security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3046-1] mediawiki security update (Salvatore Bonaccorso <carnil@...ian.org>)

October 7 (6 messages)

Paypal Inc Bug Bounty #30 - Filter Bypass & Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #53 - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Multiple Vulnerabilities in Draytek Vigor 2130 (Erik-Paul Dittmer <epdittmer@...italmisfits.com>)
CA20141001-01: Security Notice for Bash Shellshock Vulnerability ("Williams, James K" <Ken.Williams@...com>)
Security advisory for Bugzilla 4.5.6, 4.4.6, 4.2.11, and 4.0.15 (dkl@...illa.com)
OWTF 1.0 "Lionheart" released! (Abraham Aranguren <abraham.aranguren@...sp.org>)

October 8 (4 messages)

Multiple vulnerabilities in DrayTek VigorACS SI (Erik-Paul Dittmer <epdittmer@...italmisfits.com>)
[security bulletin] HPSBMU03118 rev.2 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities (security-alert@...com)
[CERT VU#121036 / Multiple CVEs] RCE, domain admin creds leakage and more in BMC Track-It! (Pedro Ribeiro <pedrib@...il.com>)
[security bulletin] HPSBGN03108 rev.1 - HP Records Manager, Remote Cross-Site Scripting (XSS) (security-alert@...com)

October 9 (16 messages)

[SECURITY] [DSA 3047-1] rsyslog security update (Luciano Bello <luciano@...ian.org>)
Reflected Cross-Site Scripting (XSS) in Google Calendar Events WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
Reflected Cross-Site Scripting (XSS) in EWWW Image Optimizer WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
Two XSS in Contact Form DB WordPress plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
[Onapsis Security Advisory 2014-028] SAP HANA Web-based Development Workbench Code Injection (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2014-027] SAP HANA Multiple Reflected Cross Site Scripting Vulnerabilities (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2014-033] SAP Business Warehouse Missing Authorization Check (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2014-030] SAP Business Objects Denial of Service via CORBA (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2014-029] SAP Business Objects Information Disclosure (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2014-031] SAP Business Objects Information Disclosure via CORBA (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2014-032] SAP BusinessObjects Persistent Cross Site Scripting (Onapsis Research Labs <research@...psis.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 3048-1] apt security update (Thijs Kinkhorst <thijs@...ian.org>)
[security bulletin] HPSBMU03127 rev.1 - HP Operations Manager for UNIX, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBMU03110 rev.1 - HP Sprinter, Remote Execution of Code (security-alert@...com)
[security bulletin] HPSBHF03136 rev.1 - HP TippingPoint NGFW running OpenSSL, Remote Disclosure of Information (security-alert@...com)

October 13 (8 messages)

[security bulletin] HPSBMU02895 SSRT101253 rev.4 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of … (security-alert@...com)
[security bulletin] HPSBST03122 rev.1 - HP StoreAll Operating System Software running Bash Shell, Remote Code Execution (security-alert@...com)
SAP Security Note 1908562 - Port scanning in BusinessObjects Explorer ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
SAP Security Note 1908531 - XXE in BusinessObjects Explorer ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
CSNC-2014-004 neuroML - Multiple Vulnerabilities ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
SAP Security Note 1908647 - Cross Site Flashing in BusinessObjects Explorer ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
CSP Bypass in android browser prior to 4.4 (evanjjohns@...il.com)
Call for Papers - WorldCIST'15 - Azores, 1 - 3 April 2015 ("ML" <marialemos72@...il.com>)

October 14 (9 messages)

CVE-2014-3671: DNS Reverse Lookup as a vector for the Bash vulnerability (CVE-2014-6271 et.al.) (Dirk-Willem van Gulik <dirkx@...weaving.org>)
PayPal Inc #86 iOS 4.6 - Validation & Design Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc BB #85 MB iOS 4.6 - Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc BB #96 - Persistent Tags Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Reminder: Passwords14 CFP + registration announcement (Per Thorsheim <per@...rsheim.net>)
[security bulletin] HPSBMU03133 rev.1 - HP Enterprise Maps Virtual Appliance running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBGN03138 rev.1 - HP Operations Analytics running Bash Shell, Remote Code Execution (security-alert@...com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Domain Manager (Cisco Systems Product Security Incident Response Team <psirt@…)
[security bulletin] HPSBUX03139 SSRT101608 rev.1 - HP-UX running System Management Homepage (SMH), Remote Cross-Site Request Forgery (security-alert@...com)

October 15 (11 messages)

LiveZilla 5.3.0.7 Security Issue (sourav.infosec@...il.com)
two browser mem disclosure bugs (CVE-2014-1580 and CVE-something-or-other) (Michal Zalewski <lcamtuf@...edump.cx>)
[SECURITY] [DSA 3049-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SE-2014-01] Breaking Oracle Database through Java exploits (details) (Security Explorations <contact@...urity-explorations.com>)
PayPal Inc BB #98 MOS - Persistent Settings Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc #90 PDF Mailer - Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Indeed Job Search 2.5 iOS API - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc MultiOrderShipping API - Filter Bypass & Persistent XML Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Multiple Cross-Site Scripting (XSS) in WP Google Maps WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
Reflected Cross-Site Scripting (XSS) in MaxButtons WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
SEC Consult SA-20141015-0 :: Potential Cross-Site Scripting in ADF Faces (SEC Consult Vulnerability Lab <research@...-consult.com>)

October 16 (10 messages)

Cisco Security Advisory: Cisco TelePresence MCU Software Memory Exhaustion Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Video Communication Server and Cisco Expressway … (Cisco Systems Product Security Incident…)
Advisory 01/2014: Drupal7 - pre Auth SQL Injection Vulnerability (Stefan Horst <stefan.horst@...tioneins.de>)
Cisco Security Advisory: SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
[SECURITY] [DSA 3051-1] drupal7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Bypassing blacklists based on IPy (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
[slackware-security] openssl (SSA:2014-288-01) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBHF03125 rev.1 - HP Next Generation Firewall (NGFW) running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBMU03126 rev.1 - HP Operations Manager (formerly OpenView Communications Broker), Remote Cross-site Scripting (XSS) (security-alert@...com)
[SECURITY] [DSA 3052-1] wpa security update (Michael Gilbert <mgilbert@...ian.org>)

October 17 (9 messages)

Cisco Security Advisory: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@cis…)
[SECURITY] [DSA 3053-1] openssl security update (Thijs Kinkhorst <thijs@...ian.org>)
[CORE-2014-0007] -SAP Netweaver Enqueue Server Trace Pattern Denial of Service Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
APPLE-SA-2014-10-16-1 OS X Yosemite v10.10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-10-16-2 Security Update 2014-005 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-10-16-3 OS X Server v4.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-10-16-6 iTunes 12.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-10-16-4 OS X Server v3.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-10-16-5 OS X Server v2.2.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)

October 20 (19 messages)

Elastix Multiple vulnerabilities (Remote Command Execution, XSS, CSRF) (simo@...xploit.com)
Re: LiveZilla 5.3.0.7 Security Issue (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 3050-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBHF03084 rev.2 - HP PCs with UEFI Firmware, Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBMU03143 rev.1 - HP Virtualization Performance Viewer, Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBMU03144 rev.1 - HP Operation Agent Virtual Appliance, Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBST03131 rev.1 - HP StoreOnce Backup Systems running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBST03129 rev.1 - HP StoreFabric B-series switches running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBGN03142 rev.1 - HP Business Service Automation Essentials running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBGN03141 rev.1 - HP Automation Insight running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBHF03146 rev.1 - HP Integrity SD2 CB900s i4 & i2 Server running Bash Shell, Remote Code Execution (security-alert@...com)
[security bulletin] HPSBST03097 rev.1 - HP Command View for Tape Libraries (CVTL) running OpenSSL, Remote Unauthorized Access or Disclosur… (security-alert@...com)
[security bulletin] HPSBHF03145 rev.1 - HP Integrity Superdome X and HP Converged System 900 for SAP HANA running Bash Shell, Remote Code … (security-alert@...com)
[SECURITY] [DSA 3054-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBMU03126 rev.2 - HP Operations Manager/Operations Agent, Remote Cross-site Scripting (XSS) (security-alert@...com)
AST-2014-011: Asterisk Susceptibility to POODLE Vulnerability ("Asterisk Security Team" <security@...erisk.org>)
APPLE-SA-2014-10-20-2 Apple TV 7.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2014-10-20-1 iOS 8.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
LiteCart Security Advisory - Multiple XSS Vulnerabilities - CVE-2014-7183 (Onur Yilmaz <onur@...sparker.com>)

October 21 (13 messages)

[security bulletin] HPSBUX03150 SSRT101681 rev.1 - HP-UX Apache Server Suite running Apache Tomcat or PHP, Remote Denial of Service (DoS) … (security-alert@...com)
[slackware-security] openssh (SSA:2014-293-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2014:196 ] rsyslog (security@...driva.com)
Incredible PBX remote command execution exploit (simo@...xploit.com)
[ MDVSA-2014:197 ] python (security@...driva.com)
[ MDVSA-2014:198 ] mediawiki (security@...driva.com)
[ MDVSA-2014:199 ] perl (security@...driva.com)
[ MDVSA-2014:200 ] bugzilla (security@...driva.com)
[ MDVSA-2014:201 ] kernel (security@...driva.com)
Vulnerabilities in WordPress Database Manager v2.7.1 ("Larry W. Cashdollar" <larry0@...com>)
Files Document & PDF 2.0.2 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
FileBug v1.5.1 iOS - Path Traversal Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CFP The 12th International Joint Conference on e-business and Telecommunications ICETE 2015 (icete.secretariat@...ticc.org)

October 22 (6 messages)

FreeBSD Security Advisory FreeBSD-SA-14:22.namei (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:20.rtsold (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:21.routed (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-14:23.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
iFunBox Free v1.1 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
File Manager v4.2.10 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

October 24 (20 messages)

ESA-2014-087: EMC NetWorker Module for MEDITECH (NMMEDI) Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2014-094: EMC Avamar Weak Password Storage Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2014-096: EMC Avamar Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
APPLE-SA-2014-10-22-1 QuickTime 7.7.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[ MDVSA-2014:202 ] php (security@...driva.com)
Dell SonicWall GMS v7.2.x - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
File Manager v4.2.10 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2014:204 ] libxml2 (security@...driva.com)
[ MDVSA-2014:203 ] openssl (security@...driva.com)
OpenBSD <= 5.5 Local Kernel Panic (Alejandro Hernandez <alejandro.hernandez@...ctive.co.uk>)
[SECURITY] [DSA 3055-1] pidgin security update (Moritz Muehlenhoff <jmm@...ian.org>)
[KIS-2014-11] TestLink <= 1.9.12 (execSetResults.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2014-12] TestLink <= 1.9.12 (database.class.php) Path Disclosure Weakness (Egidio Romano <research@...mainsecurity.com>)
[slackware-security] pidgin (SSA:2014-296-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] glibc (SSA:2014-296-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2014:205 ] lua (security@...driva.com)
[ MDVSA-2014:206 ] ctags (security@...driva.com)
[ MDVSA-2014:207 ] ejabberd (security@...driva.com)
[ MDVSA-2014:208 ] phpmyadmin (security@...driva.com)
[ MDVSA-2014:209 ] java-1.7.0-openjdk (security@...driva.com)

October 27 (8 messages)

Still beginner's errors (and outdated 3rd party components) in QuickTime 7.7.6 and iTunes 12.0.1 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
iTunes 12.0.1 for Windows: still COMPLETELY outdated and VULNERABLE 3rd party libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)
NEW VMSA-2014-0011 VMware vSphere Data Protection product update addresses a critical information disclosure vulnerabil… (VMware Security Response Center <securi…)
[CVE-2014-8347] Filemaker Login Bypass and Privilege Escalation (g-damore@...look.com)
Call for Papers - WorldCIST'15 - Azores, 1 - 3 April 2015 ("ML" <marialemos72@...il.com>)
[SECURITY] [DSA 3056-1] libtasn1-3 security update (Sebastien Delafond <seb@...ian.org>)
vulnerabilities in libbfd (CVE-2014-beats-me) (Michal Zalewski <lcamtuf@...edump.cx>)
[SECURITY] [DSA 3057-1] libxml2 security update (Thijs Kinkhorst <thijs@...ian.org>)

October 28 (14 messages)

[security bulletin] HPSBMU03152 rev.1 - HP Operations Orchestration running SSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBST03157 rev.1 - HP StoreEver ESL E-series Tape Library and HP Virtual Library System (VLS) running Bash Shell, Rem… (security-alert@...com)
[SECURITY] [DSA 3058-1] torque security update (Salvatore Bonaccorso <carnil@...ian.org>)
WebDisk+ v2.1 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
iFileExplorer v6.51 iOS - File Include Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Apple iOS v8.0.2 - Silent Contact Denial of Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Folder Plus v2.5.1 iOS - Persistent Item Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Google Youtube - Filter Bypass & Persistent Vulnerability [9-5942000004564] (PoC Video Demonstration) (Vulnerability Lab <research@...nerability-lab.com>)
Re: vulnerabilities in libbfd (CVE-2014-beats-me) (Mike Frysinger <vapier@...too.org>)
[security bulletin] HPSBHF03156 rev.1 - HP TippingPoint Intrusion Prevention System (IPS) Local Security Manager (LSM) running SSL, Remote… (security-alert@...com)
[security bulletin] HPSBST03160 rev.1 - HP XP Command View Advanced Edition running Apache Struts, Remote Execution of Arbitrary Code (security-alert@...com)
IEEE Technically Co-sponsored - Third International Conference on Digital Information, Networking, and Wireless Communications || RUSSIA (liezelle@...wc.info)
[ MDVSA-2014:210 ] mariadb (security@...driva.com)
phpfusion (Search Page) Denial of Service Vulnerability (iedb.team@...il.com)

October 29 (8 messages)

[SECURITY] [DSA 3050-2] xulrunner update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBUX03159 SSRT101785 rev.1 - HP-UX kernel, Local Denial of Service (DoS) (security-alert@...com)
[ MDVSA-2014:211 ] wpa_supplicant (security@...driva.com)
[ MDVSA-2014:212 ] wget (security@...driva.com)
Multiple vulnerabilities in EspoCRM (High-Tech Bridge Security Research <advisory@...ridge.com>)
SEC Consult SA-20141029-0 :: Multiple critical vulnerabilities in Vizensoft Admin Panel (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20141029-1 :: Persistent cross site scripting in Confluence RefinedWiki Original Theme (SEC Consult Vulnerability Lab <research@...-consult.com>)
CVE-2014-8399 SQL Injection in NuevoLabs flash player for clipshare (research@...tectlogic.com)

October 30 (4 messages)

[SECURITY] [DSA 3059-1] dokuwiki security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBUX03159 SSRT101785 rev.2 - HP-UX kernel, Local Denial of Service (DoS) (security-alert@...com)
[slackware-security] wget (SSA:2014-302-01) (Slackware Security Team <security@...ckware.com>)
Call for Papers - WorldCIST'15 - Azores, Deadline: November 23 ("ML" <marialemos72@...il.com>)

October 31 (6 messages)

[security bulletin] HPSBPI03147 rev.1 - Certain HP Color LaserJet Printers, Remote Unauthorized Access, Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX03162 SSRT101767 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, Man-in-the-… (security-alert@...com)
[SYSS-2014-008] McAfee File and Removable Media Protection (FRP/EEFF/EERM) - Use of a One-Way Hash with a Predictable Salt (CVE-2014-856… (matthias.deeg@...s.de)
SEC Consult SA-20141031-0 :: XML External Entity Injection (XXE) and Reflected XSS in Scalix Web Access (SEC Consult Vulnerability Lab <research@...-consult.co…)
[SE-2014-01] Missing patches / inaccurate information regarding Oracle Oct CPU (Security Explorations <contact@...urity-explorations.com>)
[SECURITY] [DSA 3060-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)

204 messages

Powered by blists - more mailing lists